Server Request Processing Limit; Authentication And Accounting Methods; Table 4: Local Udp Port Ranges By Radius Request Type - Juniper JUNOSE SOFTWARE 11.0.X - BROADBAND ACCESS CONFIGURATION GUIDE 4-1-2010 Configuration Manual

Server Request Processing Limit

You can configure RADIUS authentication servers and accounting servers to use
different UDP ports on the router. This enables the same IP address to be used for
both an authentication server and an accounting server. However, you cannot use
the same IP address for multiple authentication servers or for multiple accounting
servers.rs.
NOTE: For information about the number of concurrent RADIUS requests that the
router supports for authentication and accounting servers, see JUNOSe Release Notes,
Appendix A, System Maximums.
The E Series router listens to a range of UDP source (or local) ports for RADIUS
responses. Each UDP source port supports a maximum of 255 RADIUS requests.
When the 255 per-port limit is reached, the router opens the next source port. When
the max-sessions command limit is reached, the router submits the request to the
next configured server.
Table 4 on page 19 lists the range of UDP ports the router uses for each type of
RADIUS request.

Table 4: Local UDP Port Ranges by RADIUS Request Type

Authentication and Accounting Methods

When you configure AAA authentication and accounting services for your B-RAS
environment, one important task is to specify the authentication and accounting
method used. The JUNOSe software gives you the flexibility to configure authentication
or accounting methods based on the type of subscriber. This feature allows you to
enable RADIUS authentication for some subscribers, while disabling authentication
completely for other subscribers. Similarly, you can enable RADIUS accounting for
some subscribers, but no accounting for others. For example, you might use RADIUS
authentication for ATM 1483 subscribers, while granting IP subscriber management
interfaces access without authentication (using the none keyword).
You can specify the authentication or accounting method you want to use, or you
can specify multiple methods in the order in which you want them used. For example,
ERX310, ERX710, ERX1410, and
E120 Broadband Services
RADIUS Request Type Routers
RADIUS authentication 50000–50124
RADIUS accounting 50125–50249
RADIUS preauthentication 50250–50374
RADIUS route-download 50375–50500
Configuring RADIUS Authentication and Accounting Servers
Chapter 1: Configuring Remote Access
ERX1440 and E320
Broadband Services Routers
50000–50124
50125–50499
50500–50624
50625–50749
19